{"action":"Upgrade org.apache.poi:poi to 3.10.1 or later.","affected":[{"fixed":"3.10.1","introduced":"0"}],"component":"org.apache.poi:poi","cve_ids":["CVE-2014-3529"],"ecosystem":"Maven","epss":0.12757,"exploited":false,"fixed_versions":["3.10.1"],"ghsa_id":"GHSA-q56h-jjj6-52mf","id":"tcs_01M5N98QBF570RA88MCWMJ6C9A","modified_at":"2024-12-08T05:29:38.053062Z","published_at":"2022-05-17T01:24:40Z","references":["https://osv.dev/vulnerability/GHSA-q56h-jjj6-52mf","https://nvd.nist.gov/vuln/detail/CVE-2014-3529","https://github.com/apache/poi/commit/103b45073c7b504236588b3acc146530205af53c","https://github.com/apache/poi/commit/236c3c52a9b90688b2e57ec503559409e29f33ed","https://github.com/apache/poi/commit/6050a68d5adfb4ffef1edb778add09bcee32d1c3","https://github.com/apache/poi/commit/d72bd78c19dfb7b57395a66ae8d9269d59a87bd2","https://github.com/apache/poi/commit/eabb6a924be24abb879372d0bc967e0d316b2cf8","https://exchange.xforce.ibmcloud.com/vulnerabilities/95770","https://github.com/apache/poi","https://lucene.apache.org/solr/solrnews.html#18-august-2014-recommendation-to-update-apache-poi-in-apache-solr-480-481-and-490-installations","http://poi.apache.org/changes.html","http://rhn.redhat.com/errata/RHSA-2014-1370.html","http://rhn.redhat.com/errata/RHSA-2014-1398.html","http://rhn.redhat.com/errata/RHSA-2014-1399.html","http://rhn.redhat.com/errata/RHSA-2014-1400.html","http://www-01.ibm.com/support/docview.wss?uid=swg21996759","http://www.apache.org/dist/poi/release/RELEASE-NOTES.txt"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-q56h-jjj6-52mf","url":"https://osv.dev/vulnerability/GHSA-q56h-jjj6-52mf"}],"summary":"Improper Restriction of XML External Entity Reference in Apache POI"}